You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

Register a free account to unlock additional features at BleepingComputer.com

Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

BC AdBot (Login to Remove)

Hello timbo222, and welcome to Bleeping Computer. My name is Charles and I will be helping you to clean up your computer.Please give me some time to look over your log and I will get back to you as soon as possible.Thanks,Charles

If you are pleased with the service I have offered, you may like to consider making a donation.

Hello timbo222,I need to see another HijackThis log, but you need to extract (unzip) HijackThis first. Otherwise the backups made when items are fixed won't be secure. The easiest way to accomplish this is to reinstall and delete any copies of HijackThis.zip you have saved.

Double-click the file then click the Unzip button. Then close the Self-Extractor window.

Using My Computer/Windows Explorer, navigate to C:\Program Files\HijackThis and double click on HijackThis.exe to run it. If you would like to make a shortcut for your Desktop so it's more easily accessable, right click HijackThis.exe and choose Send To > Desktop (create shortcut).

Please run the extracted HijackThis.exe from now on. Delete any copies of HijackThis.zip that you have saved.

Open HijackThis and click Do a system scan and save a log file. Copy the entire contents of that log and post it here by clicking the Add Reply button.Post back with the HijackThis log please,Thanks,Charles

If you are pleased with the service I have offered, you may like to consider making a donation.

Please note, the entries highlighted in blue are for Party Poker. If you installed this service yourself, and use it, please disregard this fix. However, if you do not use it, I would recommend removing it because it is sometimes foistware--known to be installed along with other malware in a bundle. If you do not want this program, please remove it through the Add/Remove Programs list, along with fixing the entires in HijackThis

Then close all other windows--you should only see HijackThis on your Desktop--and click the Fix Checked button.

STEP 3Now, please reboot your computer into Safe Mode. This is done by rebooting Windows and pressing F8 at boot/Windows startup, usually right after the beep. Then select safe mode from the list. However, if this does not work, please follow the tutorial here.

Next, please find and delete the following files/folders (if present):

C:\WINDOWS\system32\clbdmo.dll <--This fileC:\Program Files\PartyGaming <--This folder, but only if you fixed the HJT entry.

For example, to find the first file, double click on the My Computer icon on your desktop, and then double click on Local Disk (C:), then find the folder entitled WINDOWS and delete the file inside called clbdmo.dll. Please repeat this for the second item.

Once you have done all this, please post another HJT log.Thanks,Charles

If you are pleased with the service I have offered, you may like to consider making a donation.

Hello Timbo222, thanks for the new log. Before we go on with the fix any more, can I ask a favour of you. Please do not edit your posts, as after each edit, I have to rework the fix, and this causes longer for you to wait until your computer is sorted out. Thanks.

Anyway, let's run a scan to make sure there aren't any leftovers on your computer.

It is a good idea to print off these instructions - they will be needed later when internet access is not available. You may also like to save these instructions in word/notepad to the desktop where they can be easily found for the same reasons as above. It is important that you complete the following instructions in the correct order, and also that you don't miss anything out!

When you run ewido for the first time, you may get a warning "Database could not be found!". Click OK. We will fix this in a moment.

You will need to update ewido to the latest definition files.

On the top row of the main screen click update.

Then click on "Start Update".

The update will start and a progress bar will show the updates being installed.
(the status bar at the top will display "Update successful")

If you are having problems with the updater, you can use this link to manually update ewido.ewido manual updatesDon't run it yet.

Reboot into SAFE MODEBy pressing the F8 key right when Windows starts, usually right after you hear your computer beep when you reboot it (some versions of windows will display 'Starting Windows' with a grey progress bar) you will be brought to a menu where you can choose to boot into safe mode.

Open Ewido anti-malware Click on the scanner button in the top row.

Click Complete System Scan and the scan will begin.

If you have any infections you will prompted, then select "Apply all actions"

Next select the "Reports" icon at the top.

Select the "Save report as" button in the lower left hand of the screen.

Save the report to your desktop.

Close Ewido

Please copy and paste the log it creates into a reply, and also, may I ask- how is your computer runnning?Thanks,Charles

If you are pleased with the service I have offered, you may like to consider making a donation.